Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: xzFLtHsnCzF1vJfqE50nvZjocPoQgULftoiqc0zPJ4U=
Subject key identifier: 9D:EB:94:AD:7A:47:78:2A:E5:E7:7F:EE:D7:33:C3:F3:91:BA:FF:89
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 0198752B98B6AD4A195A94AB4ECCBA86FCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 13:00:48 +0000
Manifest this update: Mon 04 Aug 2025 13:00:48 +0000
Manifest next update: Tue 05 Aug 2025 13:00:48 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: yD+bU+9xpoRahkX4W3sxoPL9uKXWUOe8ZW1hgu9aW+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:98:b6:ad:4a:19:5a:94:ab:4e:cc:ba:86:fc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Aug 4 13:00:48 2025 GMT
Not After : Aug 5 13:00:48 2025 GMT
Subject: CN=9deb94ad7a47782ae5e77feed733c3f391baff89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:ed:ef:a4:7d:b5:fe:1e:d4:9d:b7:0f:aa:
dd:b4:56:4c:8c:a3:38:a0:0b:ae:5f:40:63:fd:9b:
f6:50:9f:3e:15:3b:cb:e5:40:6a:30:ca:97:3a:99:
15:86:e2:ae:0d:a0:7b:c1:77:69:e5:ad:ee:8d:ad:
e3:07:b4:03:4d:de:76:89:5f:27:7d:69:35:38:e2:
bb:3c:1d:ed:c6:c4:18:51:3c:ff:cd:b0:d7:0c:96:
1e:b5:ae:2d:59:2e:09:90:38:16:dd:c6:30:51:9a:
74:f4:bf:35:fc:cc:0e:c4:44:cc:92:8c:27:34:93:
d7:41:a5:92:e0:d5:fb:93:13:f4:07:26:e3:28:a1:
58:5e:2a:cf:3d:f0:72:d1:87:32:04:e5:32:d3:49:
30:12:cb:a2:70:d7:b8:4d:5b:f3:59:ce:8b:3a:75:
ee:a7:f5:ea:95:99:75:0f:97:98:a2:fb:2c:99:06:
35:45:bc:57:4c:b4:6a:e0:71:81:20:cb:77:60:a8:
ca:57:dd:18:ff:50:91:6b:30:59:09:b0:3e:7b:d3:
92:1e:a7:a7:4a:e3:05:10:ba:11:bb:f7:4c:1d:5f:
1e:f5:56:16:27:1b:08:3a:0a:0a:10:79:27:54:5a:
af:4d:7c:5b:32:9b:ce:a5:0a:40:59:61:44:b3:48:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EB:94:AD:7A:47:78:2A:E5:E7:7F:EE:D7:33:C3:F3:91:BA:FF:89
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:82:fc:c8:94:2c:85:62:d4:69:4a:bb:64:bd:09:59:07:11:
ab:c2:bb:b3:0d:c5:05:bf:ef:a6:d8:e1:d1:b7:d1:ae:0a:73:
48:61:a2:7a:ee:13:e8:89:b5:6f:d6:0c:19:81:ad:cb:44:3d:
c8:23:a7:27:87:43:82:82:72:3f:3f:84:02:33:ba:59:3d:1d:
ff:3b:ba:1b:29:62:3f:1a:e8:78:e2:6c:6c:b3:52:f0:c5:1c:
fd:f2:b1:46:9e:06:26:97:96:c5:f9:f8:14:62:0b:3d:f0:bf:
fc:b1:1f:1f:8c:78:74:85:87:2e:96:cf:a2:90:1c:9c:c9:83:
95:86:d0:0f:6c:2b:66:a9:73:d2:d5:58:e3:8f:ed:ad:31:6c:
c7:e4:f3:49:30:3e:ff:5c:e2:dd:3e:f5:8f:b0:a8:aa:0c:e0:
3f:24:40:42:59:a2:78:0b:e5:ec:b9:c6:43:76:7b:fe:4e:7c:
03:16:6e:af:dd:e3:f8:0b:27:5d:a2:55:f8:51:4f:00:fb:0e:
6c:97:1c:65:35:54:f4:1a:8a:fd:2f:d8:2e:e4:f5:70:72:7b:
13:de:32:29:9a:96:44:2b:c0:b2:98:e6:a5:69:19:57:c7:c9:
71:95:7d:5e:cf:77:d1:6b:9e:79:78:7b:e3:7a:f7:cb:e4:71:
ac:b6:e3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:02:48 2025 by rpki-client